From 1712a7f56c3a74e13805050383af0278673624f8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Oct 2026 15:29:44 +0000 Subject: [PATCH 1/2] chore(deps): bump the pip-root-minors-patch group across 1 directory with 21 updates Bumps the pip-root-minors-patch group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | | [allure-pytest](https://github.com/allure-framework/allure-python) | `2.13.5` | `2.16.2` | | [httpx](https://github.com/encode/httpx) | `0.26.0` | `0.28.1` | | [playwright](https://github.com/microsoft/playwright-python) | `1.62.0` | `1.63.0` | | [selenium](https://github.com/SeleniumHQ/Selenium) | `4.16.0` | `4.50.0` | | [factory-boy](https://github.com/FactoryBoy/factory_boy) | `3.3.0` | `3.3.3` | | [pydantic](https://github.com/pydantic/pydantic) | `2.6.1` | `2.14.0` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.1.0` | `2.15.0` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.1` | `6.0.3` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.0.0` | `1.2.4` | | [pydantic-extra-types](https://github.com/pydantic/pydantic-extra-types) | `2.6.0` | `2.11.1` | | [locust](https://github.com/locustio/locust) | `2.46.4` | `2.46.7` | | [bandit](https://github.com/PyCQA/bandit) | `1.7.6` | `1.9.4` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.25` | `2.1.4` | | [asyncpg](https://github.com/MagicStack/asyncpg) | `0.29.0` | `0.32.0` | | [aiosqlite](https://github.com/omnilib/aiosqlite) | `0.19.0` | `0.22.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.4` | `0.16.10` | | [types-requests](https://github.com/python/typeshed) | `2.31.0.20240106` | `2.33.0.20261006` | | [allure-python-commons](https://github.com/allure-framework/allure-python) | `2.13.5` | `2.16.2` | | [pytest-benchmark](https://github.com/ionelmc/pytest-benchmark) | `5.2.3` | `5.3.0` | | [alembic](https://github.com/sqlalchemy/alembic) | `1.13.1` | `1.20.0` | Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pytest/compare/9.0.3...9.1.1) Updates `allure-pytest` from 2.13.5 to 2.16.2 - [Release notes](https://github.com/allure-framework/allure-python/releases) - [Commits](https://github.com/allure-framework/allure-python/compare/2.13.5...2.16.2) Updates `httpx` from 0.26.0 to 0.28.1 - [Release notes](https://github.com/encode/httpx/releases) - [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md) - [Commits](https://github.com/encode/httpx/compare/0.26.0...0.28.1) Updates `playwright` from 1.62.0 to 1.63.0 - [Release notes](https://github.com/microsoft/playwright-python/releases) - [Commits](https://github.com/microsoft/playwright-python/compare/v1.62.0...v1.63.0) Updates `selenium` from 4.16.0 to 4.50.0 - [Release notes](https://github.com/SeleniumHQ/Selenium/releases) - [Commits](https://github.com/SeleniumHQ/Selenium/compare/selenium-4.16.0...selenium-4.50.0) Updates `factory-boy` from 3.3.0 to 3.3.3 - [Changelog](https://github.com/FactoryBoy/factory_boy/blob/master/docs/changelog.rst) - [Commits](https://github.com/FactoryBoy/factory_boy/compare/3.3.0...3.3.3) Updates `pydantic` from 2.6.1 to 2.14.0 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.6.1...v2.14.0) Updates `pydantic-settings` from 2.1.0 to 2.15.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.1.0...v2.15.0) Updates `pyyaml` from 6.0.1 to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](https://github.com/yaml/pyyaml/compare/6.0.1...6.0.3) Updates `python-dotenv` from 1.0.0 to 1.2.4 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.0.0...v1.2.4) Updates `pydantic-extra-types` from 2.6.0 to 2.11.1 - [Release notes](https://github.com/pydantic/pydantic-extra-types/releases) - [Changelog](https://github.com/pydantic/pydantic-extra-types/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic-extra-types/compare/v2.6.0...v2.11.1) Updates `locust` from 2.46.4 to 2.46.7 - [Release notes](https://github.com/locustio/locust/releases) - [Changelog](https://github.com/locustio/locust/blob/master/CHANGELOG.md) - [Commits](https://github.com/locustio/locust/compare/2.46.4...2.46.7) Updates `bandit` from 1.7.6 to 1.9.4 - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](https://github.com/PyCQA/bandit/compare/1.7.6...1.9.4) Updates `sqlalchemy` from 2.0.25 to 2.1.4 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `asyncpg` from 0.29.0 to 0.32.0 - [Release notes](https://github.com/MagicStack/asyncpg/releases) - [Commits](https://github.com/MagicStack/asyncpg/compare/v0.29.0...v0.32.0) Updates `aiosqlite` from 0.19.0 to 0.22.1 - [Changelog](https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md) - [Commits](https://github.com/omnilib/aiosqlite/compare/v0.19.0...v0.22.1) Updates `ruff` from 0.16.4 to 0.16.10 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/0.16.10/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.4...0.16.10) Updates `types-requests` from 2.31.0.20240106 to 2.33.0.20261006 - [Commits](https://github.com/python/typeshed/commits) Updates `allure-python-commons` from 2.13.5 to 2.16.2 - [Release notes](https://github.com/allure-framework/allure-python/releases) - [Commits](https://github.com/allure-framework/allure-python/compare/2.13.5...2.16.2) Updates `pytest-benchmark` from 5.2.3 to 5.3.0 - [Release notes](https://github.com/ionelmc/pytest-benchmark/releases) - [Changelog](https://github.com/ionelmc/pytest-benchmark/blob/master/CHANGELOG.rst) - [Commits](https://github.com/ionelmc/pytest-benchmark/compare/v5.2.3...v5.3.0) Updates `alembic` from 1.13.1 to 1.20.0 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) --- updated-dependencies: - dependency-name: aiosqlite dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: alembic dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: allure-pytest dependency-version: 2.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: allure-python-commons dependency-version: 2.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: asyncpg dependency-version: 0.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: bandit dependency-version: 1.9.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: factory-boy dependency-version: 3.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-root-minors-patch - dependency-name: httpx dependency-version: 0.28.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: locust dependency-version: 2.46.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-root-minors-patch - dependency-name: playwright dependency-version: 1.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: pydantic-extra-types dependency-version: 2.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: pydantic-settings dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: pytest-benchmark dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-root-minors-patch - dependency-name: ruff dependency-version: 0.16.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-root-minors-patch - dependency-name: selenium dependency-version: 4.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch - dependency-name: sqlalchemy dependency-version: 2.0.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-root-minors-patch - dependency-name: types-requests dependency-version: 2.33.0.20260906 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-root-minors-patch ... Signed-off-by: dependabot[bot] --- pyproject.toml | 28 ++++++++++++++-------------- requirements.txt | 14 +++++++------- 2 files changed, 21 insertions(+), 21 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 52d55b4..8433940 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -9,30 +9,30 @@ packages = [{include = "src"}] [tool.poetry.dependencies] python = "^3.11" -pytest = "9.0.3" +pytest = "9.1.1" pytest-asyncio = "1.4.0" pytest-xdist = "3.8.0" pytest-cov = "7.1.0" -allure-pytest = "2.13.5" +allure-pytest = "2.16.2" pytest-html = "4.2.0" -httpx = "0.26.0" +httpx = "0.28.1" requests = "2.34.2" playwright = "^1.62" -selenium = "4.16.0" +selenium = "4.50.0" faker = "40.37.0" -factory-boy = "3.3.0" -pydantic = "2.6.1" -pydantic-settings = "2.1.0" -pyyaml = "6.0.1" -python-dotenv = "1.2.2" +factory-boy = "3.3.3" +pydantic = "2.14.0" +pydantic-settings = "2.15.0" +pyyaml = "6.0.3" +python-dotenv = "1.2.4" pydantic-extra-types = "2.11.1" locust = "^2.31" -bandit = "1.7.6" +bandit = "1.9.4" safety = ">=3.0.0" sqlalchemy = "^2.0" -asyncpg = "0.29.0" +asyncpg = "0.32.0" aiomysql = "0.3.2" -aiosqlite = "0.19.0" +aiosqlite = "0.22.1" fastapi = "0.125.0" python-jose = {version = ">=3.4.0,<4", extras = ["cryptography"]} bcrypt = "5.0.0" @@ -43,12 +43,12 @@ psutil = "7.2.2" [tool.poetry.group.dev.dependencies] black = "26.5.1" -ruff = "0.16.4" +ruff = "0.16.10" mypy = "2.3.1" pre-commit = "4.6.2" isort = "8.0.1" types-PyYAML = "6.0.12.20260906" -types-requests = "2.31.0.20240106" +types-requests = "2.33.0.20261006" types-urllib3 = "1.26.25.14" mkdocs = "^1.5.0" mkdocs-material = "^9.5.0" diff --git a/requirements.txt b/requirements.txt index d4e76f0..0ed3202 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13,7 +13,7 @@ httpx==0.26.0 requests==2.34.2 # aligned with pyproject.toml; locust>=2.31 requires requests>=2.32.2 # UI Testing -playwright==1.62.0 +playwright==1.63.0 selenium==4.16.0 # Data Generation @@ -25,14 +25,14 @@ pydantic==2.6.1 pydantic-settings==2.1.0 pyyaml==6.0.1 python-dotenv==1.0.0 -pydantic-extra-types==2.6.0 +pydantic-extra-types==2.11.1 # Reporting (allure-pytest already listed above) -allure-python-commons==2.13.5 +allure-python-commons==2.16.2 # Performance Testing -locust==2.46.4 -pytest-benchmark==5.2.3 +locust==2.46.7 +pytest-benchmark==5.3.0 # Security Testing bandit==1.7.6 @@ -58,8 +58,8 @@ redis==5.0.1 # Redis client psutil==5.9.8 # System monitoring # Database ORM & Migration -sqlalchemy==2.0.25 # ORM for database operations -alembic==1.13.1 # Database migrations +sqlalchemy==2.1.4 # ORM for database operations +alembic==1.20.0 # Database migrations # async HTTP aiohttp>=3.14.3 From 38c591abc5ba5844decfe6437645fd1ba8ea8992 Mon Sep 17 00:00:00 2001 From: Joker Date: Mon, 12 Oct 2026 22:19:55 +0000 Subject: [PATCH 2/2] fix(deps): align allure-pytest pin with allure-python-commons 2.16.2 and refresh apt index before redis-tools install - requirements.txt: allure-pytest 2.13.5 pins allure-python-commons==2.13.5 exactly, which conflicted with the bumped commons 2.16.2 (ResolutionImpossible in Security Tests). Aligned to 2.16.2 to match pyproject.toml. - ci-cd.yml: apt-get update before installing redis-tools; runner's cached apt index 404s on superseded package versions. --- .github/workflows/ci-cd.yml | 12 +++++++----- requirements.txt | 2 +- 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml index ce05fc5..210ec1a 100644 --- a/.github/workflows/ci-cd.yml +++ b/.github/workflows/ci-cd.yml @@ -254,7 +254,9 @@ jobs: run: poetry install --no-interaction - name: Install redis-tools - run: sudo apt-get install -y redis-tools + run: | + sudo apt-get update + sudo apt-get install -y redis-tools - name: Wait for services run: | @@ -607,7 +609,7 @@ jobs: run: | echo "## Test Results Summary" >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - + # Unit tests if [ -f junit-unit.xml ]; then UNIT_TESTS=$(grep -o 'tests="[0-9]*"' junit-unit.xml | head -1 | grep -o '[0-9]*') @@ -619,7 +621,7 @@ jobs: echo "- Errors: $UNIT_ERRORS" >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY fi - + # Integration tests if [ -f junit-integration.xml ]; then INT_TESTS=$(grep -o 'tests="[0-9]*"' junit-integration.xml | head -1 | grep -o '[0-9]*') @@ -629,7 +631,7 @@ jobs: echo "- Failures: $INT_FAILURES" >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY fi - + # E2E tests if [ -f junit-e2e.xml ]; then E2E_TESTS=$(grep -o 'tests="[0-9]*"' junit-e2e.xml | head -1 | grep -o '[0-9]*') @@ -639,7 +641,7 @@ jobs: echo "- Failures: $E2E_FAILURES" >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY fi - + # Dashboard Backend Middleware tests if [ -f junit-middleware.xml ]; then MIDDLEWARE_TESTS=$(grep -o 'tests="[0-9]*"' junit-middleware.xml | head -1 | grep -o '[0-9]*') diff --git a/requirements.txt b/requirements.txt index 0ed3202..0b0a48c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,7 +5,7 @@ pytest==9.0.3 pytest-asyncio==1.4.0 pytest-xdist==3.8.0 pytest-cov==7.1.0 -allure-pytest==2.13.5 # Fixed: correct package name +allure-pytest==2.16.2 # Fixed: correct package name; aligned with pyproject.toml and allure-python-commons (2.13.5 pins commons==2.13.5) pytest-html==4.2.0 # HTTP Clients